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1 io 3 heroin. That is ks say. the }.-ust8« cc^porsera « 
> i \ j v " 

•f, ehysaaiiy reiefsd in fda 5 convonsnts of She corn- 
t v snuQ lotsed no 500 

(" i' 1 ' ^ 1 exfenxd . corapstei entity 
as The Internet 50 ; , and one o- more iocs! area, networks 




terfecing with she smart cart toader 103. options; iy a 
a i k i < ,c \ y , sot 

J N s v 1 , <X % v. - N 

to report back So She trusted component. Optionaiiy a 

11 

mpiaato. tiles and appiiaaione In arm: apace, and to m- 
pon Oacktoinestriartcard 

fiPOSSJ in irx- f.nxded component spaas am resident 
ni i ' f N -<b 
trusted component on xofk 100; and in ^ cm 
s< \ ) \ >% ut t \i \ ^r.i/i/.vH^ tV «. 

|0000| 

peered directories 5"i 2 -or creation of a set of data illas 

^s ,»d \ s i 

fot'P>on;iofine In e:e astx space aceoranp la she epecinc 
rnettedsdosenbod hs-:e;n i-"c; ease of iaiemnes sach 



d"Cutj :> > . ' - 




user space fa-served tor uss py the seer of th© ^t- • 1 
Pai which also amx-a. read sccs-ss by the trusted com- 
ponent: and delete saici copied files. The file nianipaisa 
iion ^ - s ■ ' s soUis 5 ■ 

t ; space operate on insir^csior: f-OiO irassed noaiponanf 
:> ire N * 
■a or piuiaiisj a::or;as if; ; ;orvoci k 

aeo h\> t p'asfed cornponent: copy files ' >i uses 
space resaiveh for :;se by \ asa; oi - srnanx.aai but 

•■a arbinh aiao . reaci acce:a? by fPe ;fi.:s;o;i .i.n ' 
asm. 

[0063} Reiomap so ? borsm inses is :i!a&;nsSad 




^ v i ^>y- c >o<s C 

using as d » snd f 

^O's'Oj L . n ^ i i 1 \ 

3C> vi $0 Cv. > - s V 01 IS: It - 

jitdMa'. xa a ih 

recirivies and reserved files. 

fOOS4) h < ' ' - . • !\h a 

oiopef ana' - - 

55 ng< ( - , > ' i 

ca-aporiea: nop : n ;he foitovving description, toons are 
illaciratad in Fain dap herein main process efeps op- 
ar; : Psa by fi is tras-ed coiPaonenf and coaioutar piadfon-n 
for aci'iornangiiaj nadiasd. if a-di or? iii-idorsscod ay idioss 

■« sk:iicd :a :he aa f hai s-aati aroccsa - may < -~ 
a;oaied in fan rorrn of coas :a a conventional pioprana 
nana iangaapa sioroc in iias rncmory o: ;he inrstedcora- 
ni a ^ ^ > f < i ^ 

orations, oaaieo cart In :;se; space m «e:as;f:i a;e exs- 
^ on il'ie p;ocoss;r:r 20 i ;tiC>tordirto a < a\ A 

5 ratio- s > iv 

X , 3 < 3 0 a s > a 




skilled In the art. and each cods may Pa wraten in con- 
veralonai - . . i ; « tangaages such as " < - 
or the like. 
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|00S5| Re , - , >a s 
as descnc&d a first mode o; openahoa tor 5; secur^y 
^ . - - N ^ The 
computer piriform gsxaxatss a conventional operating 
.system display having a pksramy of icons, for exampis; 
? dtsf a\ x 

assy. amM in known manner, wmcft when activated 
b>xxx:-er neinej xpt i \ > ■> i \ r 

suits in a dieiog >. 1 generated hy hinted com- 
poster!! 202. tor example as shown in ?acj, S Xxex. The 
c v. ' v ^ N t " t <: V ■> 

inaneo ca,-aponaa: 202. The caaiog box SCO coexaxses 
o x s.< '\ ^ - ano ' a dk; 

piay backgroand comprising an im^ge 802 rstdevsd 




card is; earned ex; by eeiaxed an;: mated snaps a.aia 

clicked a 1 - - ' ) > a ; J;;,. a ; crop-down 
nseas SO 1 vain eeXax to; i;;e asxsxxhxa- F;x e>xm- 
)i v < ta v x u •• a f : r oni- 
on c, 3 o ■> an N 

I « " fen vKn 

) ' fit ) i ■ V it < 

*> ia < x- > , - , - , , 
piiasfcam or ;e diepiay metnes oi Siies Oa ;ha ase; se- 
lecting one at ;ha options, tha imstsd cesxonani gee- 
emms a eeoinmaxx; daplay 200 ;:som;:sxa *hs ass; to 

> P. t if llv 1 i 

mation key t04 ;s weed directs - P;e nxhed „ 
i 202, aeavahoa at x soaxsonxa key pmsxtes a 
saaese method by whxn xe tanPed oenteoaaX a acti- 
vated directly Py the ase; ssePect any mirci aaay safe: - 
vention, and esxsresnxd the echoes seiecx-a inaxigh 

xdepeorJaeiiy caaiiia'ad by sansaae a;;y aaiaat^oa 
|0086I Ba:aaa : -;.p ;o i-hep 10 r;aa:aa. P;a;a is; ^asnratad 



~.a\ 'c. a\ a-x^.r,a a 
prcpaafs iasxacik>a& to the oparaiing ayaiera to create 
iha apprapfiaia daaciory or dasctonas. Agent 5n c;a- 
alas a aaaaiay at da?« Piaa in thess resa;va;i -direciovsss 

f ; : ■ 1 00i . Creahaa ot datafiiea aan bs hy f; -a ^ naPP- 
car. h;a.Py t:ia a;aaaa:" may aaa.a ay t'ae copyiag site 
d;a ;as;a vad :Jin;ak:-; :a;; at s;xsa;v;pt:P;;; on ihe aa;apa«!a;- 
aiadaaa baiorapnpj fc the aaat. v-Ah she asa( : s paa-nsss- 
Sion Ssiaoadiy. apantLVn a;ay aiioaaaaMa nasaa:; vviPaa 

;e tiaasa assarvad dir«c!osk*s. The fits names as?d mrrm 
a: !s:a: rvaa olotKSiafw being provided &y dicPosiafy 
prcajfssni 706. TPs «ap : within the fitss is provicisd by 
aic.Ponary arograa' TPS vv.;h ; n ;p s uaatsd caa:pa;' : a;'» 
202 wh«;'a ganerataa iaaiviaaai woaia and strings of 




1 1 a:anita;a taa phaaiay ra ar;;;;aad v >< t dssfa ates; 

v." hi I t ^ 

cwd- - <■ t-uNaoo 

COf M " v N , 

;a; ^ , i s v 

tha agaal 51 1 ;r>a.y per;odic3i:y ;apoh aaat; agent eaaaP 
sd life to the t ) t h i< 

, >wr >.< 3< ' ^ n a » axi jto e 1 - 

d;a asgaih a^ua a; X; ;aaaaa ;aa;aa;y area 402. Tajsiasi 

:-s an 2( a;: > gasidiiia. coasprts 

, ■- , , ■■ 

caaaat xaaai data tea eaan nioi-atored ranarvaa data fits 
in ;ts nxaaoiv a;aa 402. 'Trastad component 202 opsa 
atas an aiaoattaa eon^prssinp dipast axnitortag aonxo- 

■>o ;-isn; 702 to clxjck xaatax taa aravi;xis digest data of 
each perpcuPa aqaa" caaafad data •lie is idaaiiaai to taa 
caaea; digest dad; of that iiie Within digest atoaitoaag 
eoaxonaat 702, tixaa is provided a saaaaxa his space 
into which axa.Xa ot the ;ao;ataaag arOiasas a:a ;eaoaX 

-•a , ii, j' 3 x - 
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p eset io a c a t p eoiets -ninsd number o! e si 
i any cj . % ~ or o:.amph 
: ^ c fu \ xx< N ! 

or rxaxvoo iiias ^ i\ i. » s pmso; •: : an allowable - . of 

t . <. v . . . >> 

mined tone., ox/lag nee io a <s:e<n::ic.3'-:i axon; d errors ir> 
! i rs mr t - f N 
to ieof > x 

no sioxliicoto obaocpi 5 m -be; ed cisto I oa are daioi- 
w 5 step N and )£ 

£11 continues to panooirxtoy ;r;csn ;io;- toe ssiaetoci dale 



top -002 ; 



at Doing 10% ot ins number of rsa! user Hiss created, 
men for aimses which ideality mm to, is name, filers 
is a oorfssponoinp pamonbase (tor sxampis r0%; prob- 
ab&ty a vims wii] abac* me sacniiala; Mas in m- 

k <. of all she f )(<.<. rxxaaxaa ik >• 

and user files siam-ci or- -bo computer platterm Thus 
too m . nan-tees a frequency of oncus oxxerxg 

~ * \ - . !<1 ,s 

i. . >hhe > 
Do. - ^ N - 1 
\ I ''ij. ' 

axorsxb jxogsanx., which p rev ids? an alaec iuncuon to 

predeierminod laveu . 
has occurred on the compter xatoxm. ;n a manner 
which earmoi be xieaeex; ^ by users of toe oempanx 
plaborm. . ^ ^ Increased imsiatoiiiy to the 



•a; comcofsen 



1007 1 



r daSa 



: toa ; 



' b . V it 

ifa to" 1 •> N ^ ^ 

to' Oi,t \ > 1 X f -.Sft p OCt<r*-t 

may have boon subverted . a v a tor exarnpfe), so 

! > ^ X v.(! 

r; or jmaibk; 

dabs io toe masted component nab causing ;ha ouxeo 
component io cm-puts a digesi asmo. s oxn resources, 

r \i> to 1 
has ax- biixabxmtoge toot to;; ;x-xess is slower, be- 
cause ibo busied compaaera n.as xto-aa comptoing aa - 

t v i ! " N i ! 

ton; She aeon proaaaa eaaao- be saaveaao : borice asam 
:a g:oeis: .ot ;n ;ae vak-e or ;ba eigoa; 

- r b 1 o at x t. .t proaiaiso bOO raaa ooabaaoasb. 
no ;to:ias in toe a i 



i near oabablea ;o -be esar apace. ™ propoato^ 
a. t. <. data saored In ton bss can ba satoctod by a 

sraa . <. r . 5 n no; h t 



. tha . t, i piatiorna abb ine uratoa permission 
Tirg user gave toa! ae;a);ss;oa by in j 'enabio 

iijraaoa ;t:aia-e box Sob 'toe usor inay iraiioato fiis or 

•jvtooti >o\ .o^ rito-t'o^ 

key display pron-aa biib as oasenbod > -iy I siop 
1101. agora 5 1 1 ssiao- a m%v iife na-os for too Jfis oop- 

. < i > i aa f ra-y !; 

sssijei-xi randoaiiy by agm\ 511 ; ot rosy be goitoraled 

. (.Xfti t 1 ' " t nirgOXbX A 

- i at it 

toa esseived dlrostoay io wbicn ;i :s es-orod, which is eae- 

in siae viG2 : -be apent stores ine ia;aaaiad oser daia 
ibe ;n iisa resorvod dlrsotory x tha rascivao memory ar- 
ea . ax iunb'asted) comamar piatkxan memoty - >m 
e.p iha aato disc or RAM, in siae . agon; ton i 
, a hash tonciioa tc iba dato Siia to gervxato a . 
- one n< j Tha tomto 

i- ts - ^ 

1104 The itxsiad oomponani stems toe digeei data its 
a mabod memory sma bbb as; diiseatbod prav<;;;xiiy ;o 
sfeg UOS in strip xb5 * - a^x coaponeto doter- 



ialato 



mines amoto-x 

particafar file si 
memory area 4 
geei data from 



aipex daia ab;atr:aa for ;aa; hie. toon ;ho ixiarao 
as carreto bigoa; data, amd waits Sor ageni 5X1 io (. 
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:<0 



a v mm digest data en - same Hie > a predeter- 

pfes a hash function as pa? step : ;03 described 
ousiy and reports a :sow ewert digest data On rscsiv- 

\ PIPV 1 i 

tor th si tils • 

and an hlaohsei mass; dam lot that hie. and can make 

0 o'jJm 1 boiaeen me c enest and - . i ,d ^ \ 

1 i - i * i > 

Hie In step rtO? Is' she ressl; as ihss comparison is that 
se camem dtge 1 ms - - 

a? pf eylase msteusai digest c.mta to; me sp : a; step • • OS. 
r- - u ui v a predoisernneat paaod tr> step HOP 

r a >a o ^ * - k - am me user 

siar his csmpaKsi ic the sismosisy mooded hatamsd 

im?2\ Has! i'wictasa v« k a t the pno 

- to I he 

J r s j f ; n i * 0 V 

aia. Thus < f r - 

rosmts la a met digest cui^a mm ostpui a: me mma atee 
tm > <* 1 change s g. a , bit of data m > sag- 
- i i - - M - >aii > ek , 

$ t> ICtfO - c 

liie thus, a data iilo composing emeaeyais ot ease may 
ha inptsi mtothe cash madia?'! and mseii - a - our ■ 
pas of the orderoi 128 So PSObiis length, as ihi: msni'tans 
digest data Having a relatively * - arneans 0 i 
data generatect from a data i'iie stored in tea maemed 
v v. >o - a 

so ^a,-ndi<^ 
mnt. 

(0073] K ^ i= „ 3 

-, N t t i \ letsraomm a , aetaieea suited eompo- 
< d o \ via * ' a-eriece 305 and s m >, 




aaaieii a;-;d ;xaa:.s ana S:yn-ia.:: a tack to ths ^ oa;d 



, % \ ^ a - v s \ ^ ^< 

tns smart card can vanty tnat the tressed component ss 
o. 5 - Suss * v 

s-xp « ^ - o) t at h 4 • ^ ! i ta « k - 
t: na-'-stOfad program on the smart card to make an :aven- 
lory o; the mee's. rites and senas riee invontory beak ;a 
the eseted sortipcrasat if? ste?.- titOa. atta: tiiid: vari;y:r;p 
die request in step 1 305 arid cen';tr;a.;ins a ii!e irrverirary 
' - a ; ' - > - 

as sived hy sgsnt SOS. Tee tmarad c 

■>afit „ ^. 

or altered csert:: S ;; and erearss ;a;w dirseaeies in 'he 
proxy apsat 514 see-so a ;;r -eraas-d ss-;r tiles nee a raens 




v.?oent ei t n 1 

•has stnfertcard aars/o; !l5 epent 5t-t deletes the copis« 
a ii< ^ d 

■tw rm\ ht^ v a - - u h i vm 

to* 01 > ^ ! v v 1 ^ 

to t' " tw, x < v k -> and then ' n ep t > ? Sa!ltar;r 
resd access to the agent 511 is ds-med by erear; s;ad 
505. 'iaeaaaet Shan sean-aem if! step idtB ta eompata 

a> tils dlgssas by applying the Oast? iarictK^a So :rm'h ladl- 
vidijsii l::e i;i tee reserved directories In seer space, 
which are tnen reported to the trusted compo;-:er:t pen- 

f 5 '\ 1 -~ 
ed eornpniarat stores tan digest's inside the trusted cone 

■« eoaea! : sen pceea : nes the unssssai v error records sf sr- 
rois oecar ?ino generates ahuna; asp mparts tome mom 
iter 1 00 and otner oataioa as dsssnsed previovsiy nsns- 
in with t ate ranee to Figs. "0 and 'Pi, 
CC v sj - m . . ^ aapa- 

-re , hs; sde'eo ' < tee dimteel - \ - »^ -i as < «. t - 
nipiareian ^o&.mt. 70s, ee tteat lestead at she agent sat 
pondin > N - v. N < - oirtpt iet pla! 




os capable ol detacitng ^ saecrs ot any vims wtach op- 
erates by ehaeplng data on a an . fe n 



It 
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form, said msthod comprising the- steps of 

U) creatine a daia toe in a mommy area oi aaai 
computing piastorm; 

data content of said data tiie: 

fvii} wasting a a a> posed 

viiit' V - I'm ' ' N !^t)- X C 

x f < < f - \ 

s id *g»s d 



2, 1 



further co-T-pris- 



isnhcai to 
tip io ;*j 



a computer platform comprising a 
0 recess: no means and a s ~x 



a monitoring conyr-onem comprising a second 
data processing means and a second memory 



vvhai'sin said moraJonrsg compwsani exsmpsises 
means for reoemiog a: monitor data, amd mon- 
pi It ' i, i 



m -is tor atonna naid pii maxy -.a roc 
aid ;aoniioaaq component, arid 



ms for making comper isorv; 



iOQ inc.- eiee of 

V) s P , second , , is > identical 
io sain iiini diomn earn, storing an error da la a naid 
Smoted memory area. 

4. Thstyw • • ■) 5 i <s v oms-tfcistep 

-J - a if - v ' sm- ad, > 0 

a hash \ N % to said data « , io produce a hasp 
t x ai -> \ ^ > 

5, The metheo as- ; iaeaed a; simm i emerem said i top 
of creatm;;; a dam die in a ;nsmo;y ams oi said com - 
,x pi u ' 1 comprise;; to >> <x user 
i ft ■ m msamed ■- o! said memory ansa 
oi said ecrnputer piatiorm. 



said historical mooi 
data are stored in 
said monitoring cos 



n data and samsones; monitor 
> k v a % i 

ponc-ni. 



11, \'<xr-" \ mi ■> n.<\ , 

f ^ >>-,,> 
agent code stored io said second date sfcxags 
means, wherein seed sat oi agent code may hi; 
' is >i \> to said first da;a eiomge means for 
oration and coniroi oy said firs; data processing 
means in said compuier piatiorm. 



6. x ^ < ma r 

oi ensahap a data t : io in saai mammy area corneas- ->o f 2. Tho aonxnaoi rratif y as claimed in 



aim P. v 



as gsnnmpna a random or asnado random data m 
a arscivad portiori of said memory a- of.; of eaa; cam - 
> m u 



7. Ti-se msthoc; as cNmed in ci«tim 1 . wnsr«in & 

difi^ o said 

cfat;} { ;s r;ar!:aci < i;y f:iao;:fii;T! ciparai:ap on 
Siico ;rr;r:xa.esir f , ii ' 



said raonitoriia] nofnponani comprises a 
means : sr : id dieaonary moans eompns 



fox; data a 
monitoring 



a f : r 



main 



ding a 



said data S^a fan tresiad eoatponcnt nompas-rn 
i: risidri processor and a nested memory area, an 
aenemaag said digest data Py appiysno. an ,c 
rithm to said data ids in said trusted ccmpoieaf. 



S. A computer snitfy oompi;s:np 
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' s a asm 

5.0 v S , - ^ 

vii> means, saidagsni irssans ats~ 

k'c and operating on said coaiputsi' oH 
wherein, 



ioniJor data, genera 



dOi dafa 



<; as claimed :a claim 18, farther compa's- 
p at ganaraiing sate f I; st monitor data ay 
; oneaaay fLjnoison algorithm la a data 
comam oi said data ilia 



said ansa; rnaans cc sates a plurality oi said da ■ 
tei i\ 'i'm- ; i sim nc v 



s i > ao« ->t - ~<~m c w \ 

^ said created daia f;las te >■ •> ^ v 
memory tsgbn and 

s i f 3 

a cardans of said data hies ia said reserved 
memory regiod periodically to said mooftoring 
pempO)Wss 



aa in chum 9. compris- 



ory area phys;;caj: 
$w0 compute? pirn 



:2c " - niiihiaxl - claimed si , " lander compris- 
ing iha step of: 

paaaiatlrm an alarm display v.teen a sard eno; 
daia rs created. 

Pi s -> ' ?<U 

(a p sna sfep of 

cnaysunag said enar daia against a predeter- 
mined measure of eaar data aitowadle in a praee- 
remaned ; me to deter mine if ss;d see;' daia ts sis- 

22. 



1< 

sfomd u; a piuraiCy oi sasd data lites crcamd -a a 

composer platform. 

17, Thecoma > - § c< npris 
(flf.) red device amufc said computer plsi 
iO'T atX'd, " ~ 3^0 de 
sgsnt device ;^ma' -cairn, with said smart cam 

's '< , 'arid Pa tan 

, - - v n !< * ' . 

cfcscnbrrip, one or a' p?Ufa!<ty of rite names of usar 
! ,s files a ' permission k; ' seal user , as 

< .} ' 

18. A metnod oi seesroy rrsoniioPng a computer plat- 
form aonyirjssu) a had daia processing means arid 

a lust manxay means, seas ma-Shoo composing tee *? 



receiving a flisi monitor da;a : aiae Pre;' rnanitoi 
data deecndlna a data ccafar-f of a data ilia 
>U . a 



n. A mstrjod of 
pesings fifst 



detain adaaiad mr:u-t- 
i iofpcaijy idsilant frorn 



aa siaSia;:- 
ap.P !y ;adr- 



: q a aaay>a;oi aiadoen eorn- 
'Sri;sap irisj.an.s ; : :f?d iimi. a;am - 
od eodipdsii-ip tda steps of: 



a caat " anon ' ' »a '\jv 
sns far asa ay a raaraiaaag ' \ , a an 
;<:a:;5a;jdri;i:;p;<:aa;sai;;;p-naaus 
•:x!0' mamoiy means; 

b ■ r:;a;:ri:;r;-3 :,-> saai eiioea^ed mssT-ory area a pia- 
raliiy of dad; files, aaah ai!oeate;j m a;ad n'iora 
storing snfity: 



daia iiias :r-; sa'd raaa;a'0d i^ai-riory racpoa; 

d) a;eaiinp iof aaah a; sate data fifes a mofiiioi 
aaia aasaribiag a data content oi each oi sard 
data fife: 

e) stosig said ox-fntcr (Ma m a socond raem- 
o;y device, said sac;)ai; rnaracriv >di;vl>:;a belao 
physieaiiy a.nci iopicaily drsirocf tiom aaki f::s; 
maraoiy davicc. 

ft repeaiina steps d) a; : d a; and 



daia trie vara a previ-- 



Caald rirsimoaiiordafadiffafs 



24, ■> i i N 
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s;ap et sntsring data into a said daia tiis compfisss: 

served arsa oi said first memory davics in;c said 
data is. 

2S \ <\ ^ -* 

ing the Slap ct 

assigning a hie mrw oi said 0a;s iiis in w4 
rssejved memo > a d 

teens iiis nar^s Jo a iiia narns oi said original user ;s 
life i;'C>Ti said nnros;:-;vea a-oa oi satci fif-sf tnsraory 
st s fro n * d S % copied 

ite in said reserved memory 

Hjrv^iarnacisaidiiH^vufnv sc- 
am iiio aa:, ongioaiiy kxat- 




, Thf3 m«:lhod as; da^oa :r- cJarrr-. 23 v,-he 
ai sfiid data iiiij. ;o produce said asc-fao; c 



«5 



as 
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Fig. 3 
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CPU Native 
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Processor 



y Volatile Memory 



Non- Volatile 
Memory 



Crypt 
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Fig, 4 
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Fig. 7 
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1000 

a o f 

elusive 

i ^ 



&lio an >or* f , h-ea c 
entrusted Computer platform for exclusive 
aci:;ess ^V^-;^g^ iii £2^ pO c ' 1 . en 

/Copy ; \*t of selected use?- data tiles 
to predr s s 'mmc so o I i a si?* h i t t 
f untrusteci Memory area assigned to users d; 
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